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Question: 1 


Your network consists of an Active Directory domain and a DirectAccess infrastructure. 
You install Windows 7 on a new portable computer and join the computer to the domain. 
You need to ensure that the computer can establish DirectAccess connections. 

What should you do? 


A. Install a computer certificate. 

B. Create a new network connection. 

C. Enable the Network Discovery firewall exception. 

D. Add the computer account to the Network Configuration Operators group. 


Answer: A 


Explanation: 

Certificates 

The DirectAccess IPsec session is established when the client running Windows 7 and the 
DirectAccess server authenticate with each other using computer certificates. DirectAccess supports 
only certificate-based authentication. 

DirectAccess Client Configuration 

Clients receive their DirectAccess configuration through Group Policy. This differs from traditional 
VPN configuration where connections are configured manually or distributed through the connection 
manager administration kit. Once you have added the computer’s client account to the designated 
security group, you need to install a computer certificate on the client for the purpose of 
DirectAccess authentication. An organization needs to deploy Active Directory Certificate Services so 
that clients can automatically enroll with the appropriate certificates. 


Question: 2 


You have a portable computer named Computer1 that runs Windows 7. 

You have a file server named Server1 that runs Windows Server 2008. Server1 contains a shared 
folder named Share1. 

You need to configure Computer1 to meet the following requirements: 


° Ensure that cached files from Share1 are encrypted. 
e Ensure that files located in Share1 are available when Server1 is disconnected from the 
network. 


What should you do? 


A. On Server1, encrypt the files in Share1. On Computer1, make Share1 available offline. 

B. On Server1, configure BitLocker Drive Encryption. On Computer1, make Share1 available offline. 

C. On Computer1, make Share1 available offline and enable encryption of offline files. 

D. On Computer1, copy the files from Share1 to the Documents library and configure BitLocker Drive 
Encryption. 
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Answer: C 


Explanation: 

Offline Files 

The Offline Files feature of Windows 7 allows a client to locally cache files hosted in shared folders so 
that they are accessible when the computer is unable to connect directly to the network resource. 
The Offline Files feature is available to users of the Professional, Enterprise, and Ultimate editions of 
Windows 7. You can use the Offline Files feature to ensure access when a client computer is out of 
the office or when a temporary disruption, such as a wide area network (WAN) link failing between a 
branch office and a head office, blocks access to specially configured shared folders. 

Using Sync Center 

You can use Sync Center to synchronize files, manage offline files, and resolve synchronization 
conflicts manually. Sync Center is located within the Control Panel or by typing Sync Center into the 
Search Programs and Files text box on the Start menu. Clicking Manage Offline Files opens the Offline 
Files. This dialog box is also available using the Offline Files control panel. Using this dialog box, you 
can disable offline files, view offline files, configure disk usage for offline files, configure encryption 
for offline files, and configure how often Windows 7 should check for slow network conditions. 


© Offline Files Ex] 


General | Disk Usage- | Encryption | Network 


Æ Use offline files to keep copies on your computer of files stored 
) onthe network. This allows you to work with them even when 
you are not connected or 4 server is unavailable. 


“J Disable offline files | 


Offline Files is currently enabled, 


| Open Sync Center | 


Use Sync Center if you want to'sync your offline files now or check 
For sync conflicts, 


f view your offline files | 


How do offline files work? 


[OK | Cancel | 


Question: 3 


You have a computer named Computer1 that runs Windows Vista and a computer named Computer2 
that runs Windows 7. You plan to migrate all profiles and user files from Computer1 to Computer2. 
You need to identify how much space is required to complete the migration. 
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What should you do? 


A. On Computer1 run Loadstate c:\store /nocompress 

B. On Computer! run Scanstate c:\store /nocompress /p 

C. On Computer2 run Loadstate \\computer1\store /nocompress 

D. On Computer2 run Scanstate \\computer1\store /nocompress /p 


Answer: B 


Explanation: 

ScanState 

You run ScanState on the source computer during the migration. You must run ScanState.exe on 
computers running Windows Vista and Windows 7 from an administrative command prompt. When 
running ScanState on a source computer that has Windows XP installed, you need to run it as a user 
that is a member of the local administrators group. The following command creates an encrypted 
store named Mystore on the file share named Migration on the file server named Fileserver that uses 
the encryption key Mykey: scanstate \\fileserver\migration\mystore /i:migapp.xml /i:miguser.xml /o 
/config:config.xml /encrypt /key:"mykey" 

Space Estimations for the Migration Store 

When the ScanState command runs, it will create an .xml file in the path specified. This .xml file 
includes improved space estimations for the migration store. The following example shows how to 
create this .xml file: Scanstate.exe C:\MigrationLocation [additional parameters] 
/p:"C:\MigrationStoreSize.xml" To preserve the functionality of existing applications or scripts that 
require the previous behavior of USMT, you can use the /p option, without specifying "pathtoafile", 
in USMT 4.0. If you specify only the /p option, the storage space estimations are created in the same 
manner as with USMT 3.x releases. 

User State Migration Tool 

USMT 4.0 is a command-line utility that allows you to automate the process of user profile migration. 
The USMT is part of the Windows Automated Installation Kit (WAIK) and is a better tool for 
performing a large number of profile migrations than Windows Easy Transfer. The USMT can write 
data to a removable USB storage device or a network share but cannot perform a direct side-by-side 
migration over the network from the source to the destination computer. The USMT does not 
support user profile migration using the Windows Easy Transfer cable. USMT migration occurs in two 
phases, exporting profile data from the source computer using ScanState and importing profile data 
on the destination computer using LoadState. 


Question: 4 


You work in an international company which is named Wiikigo. Before entering this company, you 
have two years of experience in the IT field, as well as experience implementing and administering 
any Windows client operating system in a networked environment. 

You are professional in installing, upgrading and migrating to Windows 7, deploying Windows 7, and 
configuring Hardware and Applications and son on. 

You have a workgroup which contains five computers. Windows 7 is run by the computers. A 
computer named C01 has video and audio files. 

You have to share CO1s video and audio files on the network. 

What should you do? (Choose more than one) 
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A. Connect a removable drive and enable BitLocker To Go. 

B. AHomeGroup should be created. 

C. The files should be moved to a Media Library. 

D. All BranchCache rules should be enabled in Windows Firewall. 


Answer: B, C 


Question: 5 


You work in an international company which is named Wiikigo. Before entering this company, you 
have two years of experience in the IT field, as well as experience implementing and administering 
any Windows client operating system in a networked environment. You are professional in installing, 
upgrading and migrating to Windows 7, deploying Windows 7, and configuring Hardware and 
Applications and son on. You manage a computer that runs Windows 7. You have to identify which 
applications were installed during the last week. So what action should you perform? 


A. The System Performance Data Collector Set should be run from Performance Monitor. 
B. The informational events should be reviewed from Reliability Monitor. 

C. The Software Environment should be reviewed from System Information. 

D. The System Diagnostics Report should be reviewed from Performance Monitor. 


Answer: B 


Question: 6 


You have a computer that runs Windows 7. You open the Disk Management snap-in as shown in the 
exhibit. (Click the Exhibit button.)? 


= ee ee 


la Consolel - [Console Root\Disk 
fm File Action View Favorites Window Help ari 
s 2M @Maxgoas | 


T] Console Root 
i Disk Managemen |ca Simple Basic NTFS Healthy (System, Active, Primary Partition) 
cia (C) Simple Basic NTFS Healthy (Boot, Page File, Crash Dump, Primar 


More Actions > 


« m * 


EEE E 
Basic (C) 

117.19 GB 200 MB NTFS 116.99 GB NTFS 

Online Healthy (System Healthy (Boot, Page File, Crash Dump, F 


icp-ROM0 
OVD (D:) 


No Media 


BB Unallocated I Primary partition 


You need to ensure that you can create a new partition on Disk 0. 
What should you do? 
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A. Shrink volume C 

B. Compress volume C 

C. Convert Disk 0 into a dynamic disk. 

D. Create and initialize a Virtual Hard Disk (VHD). 


Answer: A 


Explanation: 
Needs to have sufficient space in order to create a new partition. Hence shrinking the C: partition will 
create additional space that can be used for a new partition. 


Question: 7 


Your network consists of one Active Directory domain. You have two computers named Computer1 
and Computer2 that run Windows 7. Both computers are members of the domain. 

From Computer1, you can recover all Encrypting File System (EFS) encrypted files for users in the 
domain. 

You need to ensure that you can recover all EFS encrypted files from Computer2. 

What should you do? 


A. On  Computerl, back up %systemroot%\Digitallocker. On Computer2, restore 
Ysystemroot%\ DigitalLocker. 

B. On Computer1, export the data recovery agent certificate. On Computer2, import the data 
recovery agent certificate. 

C. On Computer1, run Secedit.exe and specify the /export parameter. On Computer2, run Secedit.exe 
and specify the /import parameter. 

D. On Computer1, run Cipher.exe and specify the /removeuser parameter. On Computer2, run 
Cipher.exe and specify the /adduser parameter. 


Answer: B 


Explanation: 

You can import the recovery agent to another computer running Windows 7 if you want to recover 
files encrypted on the first computer. You can also recover files on another computer running 
Windows 7 if you have exported the EFS keys from the original computer and imported them on the 
new computer. You can use the Certificates console to import and export EFS keys. 

NOT Secedit.exe: 

You can use both the Local Group Policy Editor and the Local Security Policy console to import and 
export security-related Group Policy settings. You can use this import and export functionality to 
apply the same security settings to stand-alone computers that are not part of a domain 
environment. Exported security files are written in Security Template .inf format. As well as using 
Local Group Policy Editor and the Local Security Policy console to import policies that are stored in 
.inf format, you can apply them using the Secedit.exe command-line utility. 

NOT Cipher.exe /removeuser /adduser. 

NOT DigitalLocker. 


Question: 8 
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You have a computer that runs Windows 7. 

You need to configure the computer to meet the following requirements: 

° Generate a new security ID (SID) when the computer starts. 

° Ensure that the Welcome screen appears when the computer starts. 
What should you do? 


A. Run Sysprep.exe /oobe /generalize. 

B. Run Sysprep.exe /audit /generalize. 

C. Run Msconfig.exe and select Selective startup. 
D. Run Msconfig.exe and select Diagnostic startup. 


Answer: A 


Explanation: 

To prepare the reference computer for the user, you use the Sysprep utility with the /generalize 
option to remove hardware-specific information from the Windows installation and the /oobe option 
to configure the computer to boot to Windows Welcome upon the next restart. Open an elevated 
command prompt on the reference computer and run the following command: 
c:\windows\system32\sysprep\sysprep.exe /oobe /generalize /shutdown Sysprep prepares the 
image for capture by cleaning up various user-specific and computer-specific settings, as well as log 
files. The reference installation now is complete and ready to be imaged. 

/generalize 

Prepares the Windows installation to be imaged. If you specify this option, all unique system 
information is removed from the Windows installation. The SID is reset, system restore points are 
cleared, and event logs are deleted. The next time the computer starts, the specialize configuration 
pass runs. A new SID is created, and the clock for Windows activation resets (unless the clock has 
already been reset three times). 

/oobe 

Restarts the computer in Windows Welcome mode. Windows Welcome enables users to customize 
their Windows 7 operating system, create user accounts, and name the computer. Any settings in the 
oobeSystem 

configuration pass in an answer file are processed immediately before Windows Welcome starts. 


Question: 9 


You have a computer that runs Windows 7. 
You need to confirm that all device drivers installed on the computer are digitally signed. 
What should you do? 


A. Ata command prompt, run Verify. 

B. At a command prompt, run Sigverif.exe. 

C. From Device Manager, click Scan for hardware changes. 

D. From Device Manager, select the Devices by connection view. 


Answer: B 
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Explanation: 

Checking Digital Signatures with the File Signature Verification Tool 

The Dxdiag tool identifies problems with DirectX hardware and tells you whether that hardware has 
passed the WHQL testing regimen and has been signed digitally. However, it does not test the device 
drivers that are not associated with DirectX devices. To scan your computer and identify any 
unsigned drivers, you should use the File Signature Verification (Sigverif) tool. 


Question: 10 


You have a computer that runs Windows 7. 
You need to modify the file extensions that are associated to Internet Explorer. 
What should you do? 


A. From Internet Explorer, click Tools and then click Manage Add-ons. 

B. From Control Panel, open Default Programs and then click Set Associations. 

C. From the local Group Policy, expand Computer Configuration and then click Software Settings. 

D. From Window Explorer, right-click %programfiles%\Internet Explorer\iexplore.exe and then click 
Properties. 


Answer: B 


Question: 11 


Your company has a main office and a branch office. The relevant portion of the network is 
configured as shown in the exhibit. (Click the Exhibit button.) 


Internal 
IP Address: 
192.168.2.62/27 


Ke Ss ig a N 


eal 


Router 
Branch ” Sean bee: £ 
é -i š 


2 
> 
Router eg i 


a 
Main Office 
In the branch office, you deploy a new computer named Computer1 that runs Windows 7. 
You need to assign an IP address to Computer1. 
Which IP address should you use? 


A. 192.168.2.30 
B. 192.168.2.40 
C. 192.168.2.63 
D. 192.168.2.65 
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Answer: B 
Explanation: 
Internal IP Adress of router is 192.168.2.62/27 
Leaves 5 bits for range = 32 addresses (including the 2 reserved addresses) 
Subnet Mask = 255.255.255.224 
Address: 192.168.2.62 11000000.10101000.00000010.001 11110 
Netmask: 255.255.255.224 = 27 11111111.11111111.11111111.111 00000 
Wildcard: 0.0.0.31 00000000.00000000.00000000.000 11111 
Network: 192.168.2.32/27 11000000.10101000.00000010.001 00000 
Network Address : 192.168.2.32 (reserved) 


Address of First Host : 192.168.2.33 
Address of Last Host : 192.168.2.62 
Broadcast Address : 192.168.2.63 (reserved) 


Acceptable IP range: 192.168.2.33 - 192.168.2.62 


Therefore 

192.168.2.30: is out of range (in the wrong subnet, not subnet 2). 
192.168.2.40: is accepable (in correct subnet, and not reservered). 
192.168.2 63: is reserved for Broadcast (in subnet, but reservered). 
192.168.2.65: is out of range (in the wrong subnet, not subnet 2). 


Accepable IP ranges for those interested (excluding the 2 reserved IP addersses) : 


Segment 1: 192.168.2.1 -= 192.168.2.30 
Segment 2: 192.168.2.33 - 192.168.2.62 
Segment 3: 192.168.2.65 - 192.168.2.94 
Segment 4: 192.168.2.97 - 192.168.2.126 
Segment 5: 192.168.2.129 - 192.168.2.158 
Segment 6: 192.168.2.161 - 192.168.2.190 
Segment 7: 192.168.2.193 - 192.168.2.222 
Segment 8: 192.168.2.225 - 192.168.2.254 


Segments for those interested (including the 2 reserved IP addersses) : 


Segment 1: 192.168.2.0 - 192.168.2.31 
Segment 2: 192.168.2.32 - 192.168.2.63 
Segment 3: 192.168.2.64 - 192.168.2.95 
Segment 4: 192.168.2.96 - 192.168.2.127 
Segment 5: 192.168.2.128 - 192.168.2.159 
Segment 6: 192.168.2.160 - 192.168.2.191 
Segment 7: 192.168.2.192 - 192.168.2.223 
Segment 8: 192.168.2.224 - 192.168.2.255 


Question: 12 


You work in an international company which is named Wiikigo. Before entering this company, you 
have two years of experience in the IT field, as well as experience implementing and administering 
any Windows client operating system in a networked environment. You are professional in installing, 
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upgrading and migrating to Windows 7, deploying Windows 7, and configuring Hardware and 
Applications and son on. You are in charge of a computer that runs Windows Vista. You have 
Windows 7 installed on a new partition on the computer. You have to make sure that the computer 
always starts Windows Vista by default. So what action should you perform to make sure of this? 


A. In order to make sure that the computer always starts Windows Vista by default, a boot.ini file 
should be created in the root of the Windows 7 partition. 

B. In order to make sure that the computer always starts Windows Vista by default, a boot.ini file 
should be created in the root of the Windows Vista partition. 

C. In order to make sure that the computer always starts Windows Vista by default, Bcdedit.exe 
should be run and the /default parameter should be specified. 

D. In order to make sure that the computer always starts Windows Vista by default, Bcdedit.exe 
should be run and the /bootems parameter should be specified. 


Answer: C 


Question: 13 


You have a computer that runs Windows 7. 

You run lpconfig as shown in the exhibit. (Click the Exhibit button.) 

You need to ensure that you can establish a DirectAccess connection to the network. 
What should you do first? 


C:A\Windows\system32\ cmd.exe 


C:\>ipconfig 


findows IP Configuration 


Ethernet adapter Local Area Connection: 


Connection-specific DNS Suffix . : domain.tld 
IPu4 fidde eS pee! Se ale ee e te RZ 6S 28 
Subnet Mas Bik te fesse fa. ot en ale e238 ZOSnees aoe ce 
Default Gateway... . z a » 6 s § 192.168.2221 


funnel adapter Local frea Connection 9: 


Media State ....+.+ > «= » « « « $ Media disconnected 
Connection-specific DNS Suffix 


unnel adapter isatap.domain.t id: 


Media State . . 2. « «+ » acu o = Z Media disconnected 
Connection~specific DNS Suffix . : domain-tid 


G:N? 


A. Create a new VPN connection. 

B. Configure a static IPv4 address. 

C. Enable IPv6 on the network adapter. 

D. Add an additional default gateway address. 


Answer: C 
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